CVE-2021-31369

CVE-2021-31369 affects Juniper Networks Junos OS on MX Series with MS-MPC/MS-MIC. The issue is an Allocation of Resources Without Limits or Throttling vulnerability that allows an unauthenticated network attacker to cause a partial Denial of Service by generating high-rate traffic. If a Class of ...

CVE-2021-31369 Junos OS: MX Series: Traffic drops will be observed if MS-MPC/MS-PIC resources are consumed by certain traffic causing a partial DoS

On MX Series platforms with MS-MPC/MS-MIC, an Allocation of Resources Without Limits or Throttling vulnerability in Juniper Networks Junos OS allows an unauthenticated network attacker to cause a partial Denial of Service DoS with a high rate of specific traffic. If a Class of Service CoS rule is...

CVE-2021-40797

A resource-allocation flaw was found in openstack-neutron. An authenticated attacker could make API requests involving nonexistent controllers causing the API worker to consume increasing amounts of memory. This flaw could be exploited to force API performance degradation or denial of service...

CVE-2021-38463

The affected product does not properly control the allocation of resources. A user may be able to allocate unlimited memory buffers using API functions...

[SECURITY] Fedora 33 Update: containernetworking-plugins-1.0.0-0.3.rc1.fc33

The CNI Container Network Interface project consists of a specification and libraries for writing plugins to configure network interfaces in Linux containers, along with a number of supported plugins. CNI concerns itself only with network connectivity of containers and removing allocated resource...

Rockwellautomation Factorytalk Allocation of Resources Without Limits or Throttling

An attacker-controlled memory allocation size can be passed to the C++ new operator in the CServerManager::HandleBrowseLoadIconStreamRequest in messaging.dll. This can be done by sending a specially crafted message to 127.0.0.1:7153. Observed in FactoryTalk Linx 6.11. All versions of FactoryTalk...

Siemens PROFINET Devices

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: PROFINET Devices Vulnerability: Allocation of Resources Without Limits or Throttling 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled...

The vulnerability of the ReadTIFFImage function in the coders/tiff.c component of the console image editing tool ImageMagick, related to a lack of resource allocation mechanism, allows attackers to cause service failures.

The vulnerability of the ReadTIFFImage function in the coders/tiff.c component of the console-based image editing tool ImageMagick is related to an improper check of the image data size in the file. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

GHSA-H43V-26R7-7J4C Allocation of Resources Without Limits or Throttling in HashiCorp Nomad

HashiCorp Nomad and Nomad Enterprise before 0.10.3 allow unbounded resource usage. Specific Go Packages Affected github.com/hashicorp/nomad/command/agent...

Allocation of Resources Without Limits or Throttling in HashiCorp Nomad

HashiCorp Nomad and Nomad Enterprise before 0.10.3 allow unbounded resource usage. Specific Go Packages Affected github.com/hashicorp/nomad/command/agent...

JetBrains IntelliJ IDEA Denial of Service Vulnerability

JetBrains IntelliJ IDEA is a Czech company JetBrains set of integrated development environment for the Java language . A denial of service vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2021.1. The vulnerability stems from the program's unrestricted resource allocation and can ...

CVE-2021-30504

In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation...

CVE-2021-30504

In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation...

Design/Logic Flaw

In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation...

CVE-2021-30504

CVE-2021-30504 affects JetBrains IntelliJ IDEA prior to 2021.1. The issue is a Denial of Service caused by unbounded resource allocation, as described in multiple sources (NVD entry and cnvd/redhat/CVE listings). The Red Hat security entry and the JetBrains Security Bulletin Q1 2021 corroborate t...

CVE-2021-30504

In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation...

Jetbrains JetBrains IntelliJ IDEA 资源管理错误漏洞

JetBrains IntelliJ IDEA is a Czech company JetBrains set of integrated development environment for the Java language . A denial of service vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2021.1. The vulnerability stems from the program's unrestricted resource allocation and can ...

GHSA-G4CP-H53P-V3V8 Allocation of Resources Without Limits or Throttling in Undertow

A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service...

Cisco IOS XR Denial of Service Vulnerability (CNVD-2021-09296)

Cisco IOS XR software is a modular and fully distributed network operating system for service provider networks. A denial of service vulnerability exists in the ingress packet processing function of Cisco IOS XR. The vulnerability stems from improper resource allocation when an affected device...

Cisco IOS XR 资源管理错误漏洞

Cisco IOS XR software is a modular and fully distributed network operating system for service provider networks. A denial of service vulnerability exists in the ingress packet processing function of Cisco IOS XR. The vulnerability stems from improper resource allocation when an affected device...